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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1 . (Currently Amended) A communication devicei comprising: 

an executing unit configured to execute m e ans for e xecuting software; 

a memory configured to store permission dat a, the storing m e ans for storing 
permission data indicating permissible behavior for an application, the application being 
which is a group of functions provided by execution of the software; 

a checking unit configured to check m eans for checking , by accessing an external 
device before the software is executed, whether the permission data are valid; and 

an execution control unit configured to permit the m eans for p e rmitting said 
executing unit means to execute the software when, on the basis of a result of the check 
carried out by the said-checking unit m e ans , the permission data are determined to be valid, 
and for not permitting the said-executing unit m eaas-to execute the software when, on the 
basis of the result of the check executed by the said-checking unit m eans, the permission 
data are determined to be invalid. 

2. (Currently Amended) A communication device according to claim 1, further 
comprising, wher e in. 

said communication devic e furth e r comprises a determining unit configured to 
determine m e ans for d e termining whether it is necessary to carry out the check by thesaid- 
checking unit means , the checking unit said d e termining m e ans either carrying out or not 
carrying out the check on the basis of a determination made by the determining unit s aid- 
d e termination m e ans . 

3. (Currently Amended) A communication device according to claim 2, wherein, 
the said-determining unit m eaas-comprises: 
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a counting unit configured to count m e ans for counting a number of executions of 
the software; and 

a frequency data memory configured to store storing means for storing frequency 
data indicating how frequently it is necessary to carry out the check; and wherein, 

the said-determining unit is configured to determine, means d e termines, on the 
basis of a number of executions of the software, as counted by the said-counting unit, 
m e ans, and on the basis of the frequency data stored in the said-frequency data memory, 
storing means, whether it is necessary to carry out a check by the said-checking unit m eans. 

4. (Currently Amended) A communication device according to claim 2, wherein, 
the said-determining unit m eans-comprises: 

a timer configured to provide m e ans for providing time data indicating a present 
time; and 

a time interval data memory storing means for storing time interval data indicating 
a time interval at which it is necessary to carry out the check; and wherein, 

the said-determining unit is configured to calculate means calculates , on the basis 
of time data provided by the said-timer, a time period between a present time and a time 
recorded at a most recent execution of the software, and determines whether it is necessary 
to carry out the check by the said-checking unit means-on the basis of the calculated time 
period and the time interval data stored in said time interval data memory storing m e ans . 

5 . (Currently Amended) A communication device according to claim 1 , further 
comprising: wher e in: 

said communication d e vic e further comprises acount data memory configured to 
store storing m e ans for storing count data indicating a number e eunt-of times that the 
software is allowed to be executed in a condition that the s aid-checking unit m eans is 
unable to make the check; and 

the said-execution control unit is configured to permit the m e ans permits said 
executing unit means-to execute the software in a condition that the said-checking unit 
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means is unable to make the check up to a number of times which is indicated by the count 
data stored in the said-count data memory storing means . 

6. (Currently Amended) A communication device according to claim l a further 
comprising: 

an updating unit configured to obtain means for obtaining update data from the 
said-external device, and updating the permission data stored in the memory s aid- 
p e rmission data storing m e ans on the basis of the update data. 

7. (Currently Amended) A communication device according to claim 6, wherein: 
the said-updating unit is configured to: [[means]] 

transmit[[s]], to the said-external device, update timing data indicating a timing of 
a most recent update of the permission data stored in the memory, said p e rmission data 
storing m e ans, when the said-checking unit means-makes the check; 

receivers]] update data transmitted from the said-external device in response to the 
transmission of the update timing data; and 

update[[s]] the permission data stored in the memory said permission data storing 
means on the basis of the update data. 

8. (Currently Amended) A communication device according to claim l a further 
comprising: 

a terminating unit configured to instruct the m eans for instructing said executing 
unitm eans-to terminate execution of the software when the application attempts to conduct 
behavior which the application is not permitted to conduct. 

9. (Currently Amended) A communication device according to claim 1 , wherein: 
the permission data contain information on usage of at least one of an internal 

hardware resource of the s aid-communication device, an external hardware resource of the 
said-communication device, a software resource and a communication network resource. 
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1 0. (Currently Amended) A method for controlling a communication device , the 
method comprising: 

a st e p for transmitting to the said-communication device permission data, the 
permission data indicating w hich indicat e s permissible behavior for an application, the 
application being w hich is a group of functions provided by execution of software in the 
said-communication device; 

a st e p for checking, by communicating data between the s aid-communication 
device and an external device, whether the permission data are valid, before the software is 
executed in the said communication device; and 

a step for permitting the software to be executed only when the permission data are 
determined to be valid on the basis of a result of the check. 

1 1 . (Currently Amended) A computer readable storage medium storing a p rogram 
for causing instructing a computer to execut e a process, the process comprising : 

a proc e ss for storing, in a memory storing m e ans , permission data indicating 
permissible behavior for an application, the application being w hich is a group of functions 
provided by execution of software; 

a process for checking, by accessing an external device, whether the permission 
data are valid, before the software is executed; and 

a proc e ss for permitting the software to be executed only when the permission data 
are determined to be valid on the basis of a result of the check. 

12. (Currently Amended) A communication method comprising: a st e p for 
transmitting from in a communication system comprising (a) a software data providing 
server device which stores software data containing software for providing a group of 
functions forming an application, (b) a management server device which stores security 
descriptor data containing permission data indicating permissible behavior for the 
application, and (c) an application descriptor data providing server device which stores 
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application descriptor data indicating a storage location of the software data and a storage 
location of the security descriptor data, to said communication d e vic e th e application 
d e scriptor data; the method comprising: 

a step for transmitting the application descriptor data from said communication 
system to said communication device; 

a step for transmitting data indicating the storage location of the security descriptor 
data contained in the application descriptor data from said communication device to said 
communication system; 

a step for transmitting the security descriptor data from said communication 
system to said communication device on the basis of the data indicating the storage location 
of the security descriptor data; 

a st e p for storing the security descriptor data in said communication device; 

a step for transmitting data indicating the storage location of the software data 
contained in the security descriptor data from said communication device to said 
communication system; 

a st e p for transmitting the software data from said communication system to said 
communication device on the basis of the data indicating the storage location of the 
software data; 

a st e p for installing, in said communication device, the software contained in the 
software data transmitted from said communication system to said communication device; 

a st e p for c hecking, by communicating data between said communication device 
and said communication system before the software is executed in said communication 
device, whether the security descriptor data stored in said communication device are valid; 
and 

a st e p for p ermitting said software to be executed in said communication device 
only when the security descriptor data are determined to be valid on the basis of a result of 
the check. 

1 3 . (New) A communication device according to claim 1 , wherein the application 
comprises a Java application; and 
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wherein the permission data comprises a scope of rights which are granted to the 
Java application. 

1 4. (New) A communication device according to claim 1 , wherein the permission 
data indicates that the application is allowed to access information designated as 
confidential. 

15. (New) A communication device according to claim 1 , wherein the permission 
data indicates that the application is allowed to access telephone directory information. 

1 6. (New) A communication device according to claim 1 , wherein permission data 
indicates that the application is allowed to access e-mail information. 

17. (New) A communication device according to claim 1, wherein permission data 
indicates that the application is allowed to reconfigure the communication device. 

18. (New) A communication device according to claim 1 , wherein permission data 
indicates that the application is allowed to access configuration information relating to the 
communication device. 

1 9. (New) The method according to claim 1 0, wherein the permission data indicates 
that the application is allowed to access information designated as confidential. 

20. (New) The computer readable storage medium according to claim 11, wherein 
the permission data indicates that the application is allowed to access information 
designated as confidential. 

21 . (New) The method according to claim 12, wherein the permission data indicates 
that the application is allowed to access information designated as confidential. 
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